Hi,
Norton AV recently alerted me that my machine had been infected with Backdoor.Tidserv and it seems unable to remove it.
It says the files are in ?\globalroot\systemroot\system32\hjgruifojbumcq.dll
I tried using a few other AntiSpyware scans and removals, but it didn't seem to do any good... Ran with Malwarebyte's, Spybot S&D, and a couple other I've since removed from my computer... all seemed to install and run fine and even find the problems and claim to have removed them, but they just show up again after restarting.
I've just now tried to run Malwarebyte's again to post that log as well... but now I'm getting there errors:
vbAccelerator SGrid II Control - "Run-time error '0'"
Malwarebytes' Anti-Malware - "Run-time error '440': Automation error"
Tried renaming the .exe to 'MB_Run.exe' with same results
I saw on some other posts that a unique script may be required in order to remove it from the system... and also saw that a GMER scan was requested in order to help... I went ahead and ran a GMER scan and have included the .log file here
I've noticed the following abnormal behaviors in my system also:
- CD/RW drive appears as two drives under My Computer (D: & E:) & Burning Software fails to recognize a valid drive for writing disks
- When using a Google search through the browser I'm often redirected to some other Advertising sites.
- Advanced Protection in my Norton AntiVirus is unable to turn On (not sure if there's a conflict with something else?)
I don't know if any or all of these issues are related to the issue that was found... they may be separate problems altogether, but any help anyone is able to give regarding these or if they know if they're a result of the problem files would be very appreciated.
Please let me know if there's any additional information I can give that would help solve this issue! I really appreciate any help anyone can give here!
Thanks!
Kevin
Norton Systemworks & Antivirus 2009
Windows XP Pro SP3